Andras Bacsai ecce3cb9b4 refactor(api): check token abilities through the token in ApiAbility (#12193)

2026-10-18 23:16:38 +02:00

..

AddServerTimingHeaders.php

feat(ui): Shadow UI redesign, domain management, and DNS autoconfigure (#11119)

2026-08-03 23:11:54 +02:00

ApiAbility.php

refactor(api): check token abilities through the token in ApiAbility (#12193)

2026-10-18 23:16:38 +02:00

ApiAllowed.php

fix(mcp): enforce allowed IPs on the MCP endpoint

2026-10-15 23:41:17 +02:00

ApiIpAllowed.php

fix(mcp): enforce allowed IPs on the MCP endpoint

2026-10-15 23:41:17 +02:00

ApiSensitiveData.php

fix(api): expose sensitive fields for privileged tokens

2026-07-07 12:53:34 +02:00

Authenticate.php

…

CanAccessTerminal.php

…

CanCreateResources.php

fix: align resource creation permissions

2026-06-29 15:57:17 +02:00

CanUpdateResource.php

feat(auth): authorize sqlite databases with the database policy

2026-09-24 19:03:42 +02:00

CheckForcePasswordReset.php

…

DecideWhatToDoWithUser.php

refactor(auth): remove OAuth re-authentication for destructive actions

2026-09-30 21:37:02 +02:00

EncryptCookies.php

…

EnsureMcpEnabled.php

…

EnsureTeamMcpEnabled.php

feat(mcp): add per-team server toggle

2026-06-25 11:42:19 +02:00

EnsureTokenBelongsToCurrentTeamMember.php

feat(mcp): add resource diagnostics and deployment controls (#11000)

2026-08-03 23:08:11 +02:00

KeepConcurrentTeamSwitch.php

fix(teams): keep switched team when concurrent requests save the session

2026-10-16 21:07:00 +02:00

PreventRequestsDuringMaintenance.php

…

RedirectIfAuthenticated.php

…

RequirePassword.php

fix(auth): let OAuth-only users enable 2FA without a password confirmation

2026-10-02 16:01:10 +02:00

TrimStrings.php

…

TrustProxies.php

…

ValidateSignature.php

…

VerifyCsrfToken.php

…